Critical RCE flaw detected in Cisco’s communication software

Cisco warns that some Unified Communications Manager and Contact Center Solutions products have a critical remote code execution security vulnerability.

Cisco’s Unified Communications and Contact Center Solutions offer voice, video, and messaging services, as well as customer engagement and management.

• Alert

Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day

By infosecbulletin / Wednesday , November 11 2026

Microsoft has shared its updates for November 2026. These updates fix 1,093 new flaws in Windows, Office, SQL Server, SharePoint,...

Read More

• Alert

Barracuda ESG flaws exploited, gaining root access

By infosecbulletin / Wednesday , November 11 2026

Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two...

Read More

• Alert

Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems

By infosecbulletin / Tuesday , November 10 2026

Apple, SAP, and Ivanti have published security updates that fix several flaws with messaging, Bluetooth, enterprise servers, and endpoint management...

Read More

• Hot Topic

Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom

By infosecbulletin / Tuesday , November 10 2026

A jailbroken AI has been attacking a European telecom company and 13 companies using its data center and cloud for...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 10.11. 2026

By infosecbulletin / Tuesday , November 10 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

IBM fixes 208 API Connect vulnerabilities, 47 critical

By infosecbulletin / Tuesday , November 10 2026

IBM patched 208 security flaws in its API Connect platform. The CVE records released out on November 7, 2026. Among...

Read More

• Ransomware

89 New ransomware groups emerge in 2026, claiming over 2,200 victims

By infosecbulletin / Sunday , November 8 2026

New ransomware actions in 2026 show more variety in cybercrime, with some groups claimed over 100 victims. The ransomware attack...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 08.11. 2026

By infosecbulletin / Sunday , November 8 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction

By infosecbulletin / Saturday , November 7 2026

A major system failure has brought customer-facing banking services to a standstill at 128 shinkin banks across western Japan, leaving...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 06.11. 2026

By infosecbulletin / Friday , November 6 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

The company issued a security bulletin about a vulnerability (CVE-2024-20253) that could let an unauthorized remote attacker run code on a device.

Researcher Julien Egloff from Synacktiv discovered a vulnerability with a 9.9 base score out of 10. The vulnerability is due to incorrect handling of user-input data stored in memory.

Attackers can exploit this vulnerability by sending a carefully designed message to a specific port. This can allow them to execute any command using the web services user’s privileges and gain root access.

CVE-2024-20253 impacts the following Cisco products in their default configurations:

Packaged Contact Center Enterprise (PCCE) versions 12.0 and earlier, 12.5(1) and 12.5(2)
Unified Communications Manager (Unified CM) versions 11.5, 12.5(1), and 14. (same for Unified CM SME)
Unified Communications Manager IM & Presence Service (Unified CM IM&P) versions 11.5(1), 12.5(1), and 14.
Unified Contact Center Enterprise (UCCE) versions 12.0 and earlier, 12.5(1), and 12.5(2).
Unified Contact Center Express (UCCX) versions 12.0 and earlier and 12.5(1).
Unity Connection versions 11.5(1), 12.5(1), and 14.
Virtualized Voice Browser (VVB) versions 12.0 and earlier, 12.5(1), and 12.5(2).

The vendor says there’s no other solution and advises applying the security updates. The updates fix the critical remote code execution (RCE) flaw.

PCCE: 12.5(1) and 12.5(2) apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn.
Unified CM and Unified CME: 12.5(1)SU8 or ciscocm.v1_java_deserial-CSCwd64245.cop.sha512. 14SU3 or ciscocm.v1_java_deserial-CSCwd64245.cop.sha512.
Unified CM IM&P: 12.5(1)SU8 or ciscocm.cup-CSCwd64276_JavaDeserialization.cop.sha512. 14SU3 or ciscocm.cup-CSCwd64276_JavaDeserialization.cop.sha512.
UCCE: Apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn for 12.5(1) and 12.5(2).
UCCX: Apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn for 12.5(1).
VVB: Apply patch ucos.v1_java_deserial-CSCwd64245.cop.sgn for 12.5(1) and 12.5(2).

Cisco recommends using access control lists (ACLs) as a mitigation strategy when applying updates is not immediately feasible.